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DETAILED ACTION 

1 . This office action is in response to the RCE filed 01/12/2006. 

2. Claims 1-27 are canceled. 

3. Claims 28-40 are newly added. 

4. Claims 28-40 are pending in this office action. 

Response to Amendment/Arguments 

5. Applicant's arguments with respect to claims 28-40 have been considered but are 
moot in view of the new ground(s) of rejection. 

Information Disclosure Statement 

6. The information disclosure statement (IDS) submitted on 12/15/2005 has been 
considered by the examiner. The crossed out references are already part of the prior 
art record. 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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8. Claims 28-30 and 34-37 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over "Intermediaries: new places for producing and manipulating web 
content" by Barrett et al. (Barrett) in view of U.S. Patent 6,681 ,327 by Jardin (Jardin). 

9. With respect to Claim 28, Barrett teaches an information retrieval system that 
retrieves information requested by a client machine from a remote server via a network, 
the client machine operating a network browser (Page 51 0, 1 st paragraph 
"Intermediaries..."), the system comprising: 

an intermediate server coupled to a network (Page 514-515, Section 4.1 
"Configurations"), said intermediate server configured to connect with the network 
browser of the client machine, and in response to requests received from the client 
machine the connection, form a connection with the remote server to obtain data on 
behalf of the client machine (Page 511, Section 2 and Fig. 2, and Pages 509-510, first 3 
paragraphs of Section 1); and 

at least one application plug-in installed on the intermediate server, the 
application plug- in to alter the data obtained on behalf of the client machine (Pages 
512-513, Section 3.2); 

wherein the intermediate server returns the altered data to the client machine via 
the connection as a hyper-text markup language (HTML) document for display by the 
network browser of the client machine. (Pages 512-513, Section 3.2, particularly step 
(4) and note Table 1 'Document Editor'). 



Application/Control Number: 09/706, 1 81 Page 4 

Art Unit: 2155 

Barrett further teaches the intermediary can be used with HTTP-S, which is 
HTTP secured through secure socket layer protocol (Page 514, section 4, first 
paragraph). 

While Barrett states the intermediate server is capable of serving as an 
intermediary for HTTP-S, Barrett does not explicitly disclose the intermediate server is 
specifically configured to securely connect with the network browser of the client 
machine via a secure socket layer (SSL) connection. Jardin teaches an intermediate 
server that is specifically configured to securely connect with the network browser of the 
client machine via a secure socket layer (SSL) connection (Col. 4 lines 35-58 and see 
Fig. 2. and Col. 6 lines 4-8). This allows the intermediate server to support and manage 
client transactions associated with secure connections (Col. 3 lines 4-23). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to take the system disclosed by Barrett and modify it as indicated 
by Jardin such that the system further comprises an intermediate server coupled to a 
network, said intermediate server configured to securely connect with the network 
browser of the client machine via a secure socket layer (SSL) connection, and in 
response to requests received from the client machine over the SSL connection, form a 
connection with the remote server to obtain data on behalf of the client machine; and 
wherein the intermediate server returns the altered data to the client machine via the 
SSL connection as a hyper-text markup language (HTML) document for display by the 
network browser of the client machine. One would be motivated to have this, as there is 
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need for the support and management of client transactions associated with secure 
connections (In Jardin: Col. 2 lines 48-53 and Col. 9 lines 12-23). 

10. With respect to Claim 29, Barrett further teaches wherein the at least one 
application plug-in is a third party application plug-in (Pages 512-513, Section 3-3.2). 

11. With respect to Claim 30, Barrett further teaches wherein the at least one 
application plug-in includes a plurality of application plug-ins operable to alter the data 
obtained on behalf of the client machine in series (Page 512-513, Section 3.2). 

12. With respect to Claim 34, Barrett teaches an intermediary server device 
comprising: 

a web server that receives requests for resources from a client machine via a 
network (Page 51 1, Section 2 and Fig. 2, and Pages 509-510, first 3 paragraphs of 
Section 1); 

a handler operatively coupled to the web server, the handler receiving the 
requests for resources, modifying the requests when the requests are intended for 
remote servers, and forwarding the modified requests for resources to the remote 
servers (Page 512-513, Section 3,2, and Page 513 Table 1 "Request Editor and 
"Generator"); and 

a parser operatively coupled to the handler, the parser receiving the resources 
supplied by the remote servers in response to the modified requests and altering the 
resources (Page 512-513, Section 3.2, and Page 513 Table 1, 'Document Editor 1 ); 

wherein the web server returns the altered resources to the client machine as 
hyper-text markup language (HTML) documents for display by a browser on the client 
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machine (Pages 512-513, Section 3.2, particularly step (4) and note Table 1 'Document 
Editor 1 ). 

Barrett further teaches the intermediary can be used With HTTP-S, which is 
HTTP secured through secure socket layer protocol (Page 514, section 4, first 
paragraph). 

While Barrett states the intermediate server is capable of serving as an 
intermediary for HTTP-S, Barrett does not explicitly disclose the requests being secure 
requests that are received via secure socket layer (SSL) connections. Jardin teaches 
an intermediate server that is specifically configured to securely connect with the 
network browser of the client machine via a secure socket layer (SSL) connection such 
that secure requests can be received over the connection (Col. 4 lines 35-58 and see 
Fig. 2. and Col. 6 lines 4-8). This allows the intermediate server to support and manage 
client transactions associated with secure connections (Col. 3 lines 4-23). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to take the device disclosed by Barrett and modify it as indicated by 
Jardin such that the device further comprises a web server that receives requests for 
resources from a client machine via a network, the requests being secure requests that 
are received via secure socket layer (SSL) connections; wherein the web server returns 
the altered resources to the client machine via the SSL connections as hyper-text 
markup language (HTML) documents for display by a browser on the client machine. 
One would be motivated to have this, as there is need for the support and management 
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of client transactions associated with secure connections (In Jardin: Col. 2 lines 48-53 
and Col. 9 lines 12-23). 

13. With respect to Claim 35, Barrett further teaches wherein the server device 
further includes: an application plug-in framework through which at least one application 
plug-in is registered (Pages 512-513 section 3 - 3.2), the at least one application plug-in 
being used to alter the resource by the parser (Page 513 - Table 1 'Document Editor'). 

14. With respect to Claim 36, Barrett further teaches wherein the at least one 
application plug-in includes a third-party application plug-in (Pages 512-513, Section 3- 
3.2). 

1 5. With respect to Claim 37, Barrett further teaches wherein at least one application 
plug-in includes a plurality of application plug-ins operable to alter the resources by the 
parser in a serial manner (Pages 512-513, Section 3-3.2 and note Page 515 section 
4.2). 



16. Claims 31, 32, 38 and 39 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Barrett in view of Jardin as applied to claim 28 and 34 above, and 
further in view of U.S. Patent 6,598,167 by Devine et al. (Devine). 

17. With respect to Claims 31 and 38, Barrett in view of Jardin further teaches the 
intermediary server receives authentication information from the client machine (In 
Barrett: Page 515, first paragraph - HTTP proxy authentication). 
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Barrett in view of Jardin does not explicitly disclose the intermediary server 
providing the client machine with a login page for the authentication information. Devine 
teaches providing a client with a login page for the purpose of receiving user 
identification and authentication information through the login page (Col. 14 lines 40- 
52). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to take the system (and corresponding device) disclosed by Barrett 
in view of Jardin and modify it as indicated by Devine such that the system (and 
corresponding device) further comprises wherein the intermediary server provides the 
client machine with a login page through which the intermediary server receives 
authentication information from the client machine. One would be motivated to have 
this, as it is desirable to have an authentication mechanism for separating users in order 
to, for example, maintain individual histories or provide custom configurations (In 
Barrett: Page 515, first paragraph). Furthermore, there is need for authentication 
through a login procedure in order to insure a user has valid access to they system 
and/or associated services (In Devine: Col. 31 lines 18-43). 
1 8. With respect to Claims 32 and 39, Barrett in view of Jardin does not explicitly 
disclose, wherein, after a successful login attempt, the intermediary server provides the 
client machine with a session identifier. 

Devine teaches providing a client with a login page for the purpose of receiving 
user identification and authentication information through the login page (Col. 14 lines 
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40-52). After a successful login attempt, the client is provided with a session identifier 
(Col. 8 lines 43-60 and Col. 20 line 49 - Col. 21 line 25). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to take the system (and corresponding device) disclosed by Barrett 
in view of Jardin and modify it as indicated by Devine such that after a successful login 
attempt, the intermediary server provides the client machine with a session identifier. 
One would be motivated to have this, as there is need for associating stateless 
requests, such as HTTP requests, with a logical session (In Devine: Col. 20 line 49 - 
Col. 21 line 25). It is further desirable to provide additional security through the use of a 
session identifier (In Devine: Col. 20 line 49 - Col. 21 line 25). 

19. Claims 33 and 40 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Barrett in view of Jardin and Devine as applied to claims 31 and 38 above, and 
further in view of U.S. Patent 5,752,022 by Chiu et al. (Chiu). 

20. With respect to Claims 33 and 40, Barrett in view of Jardin and Devine further 
teaches after a successful login attempt, the intermediary server provides the client 
machine with an initial webpage that includes hyperlinks (In Devine: Col. 16 lines 17-46, 
and in Barrett: Page 512-515, sections 3 - 3.2 and section 4 - 4.1 ). Barrett further 
teaches retrieved documents can be modified according to plug-in configurations (In 
Barrett: Page 512-513, section 3.2 and Table 1). 

Barrett in view of Jardin and Devine does not explicitly disclose the initial 
webpage includes hyperlinks that are initially directed to the intermediary server but that 
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ultimately reference the remote server. Chiu teaches one can modify received 
resources such that certain links contained therein can be modified to be initially 
directed to the intermediary server system but ultimately reference the remote server 
(Col. 3 lines 1 1-25 of Chiu). This allows a system to modify a resource for additional 
linking information or functions other than those originally provided (Col. 2 lines 35-60 of 
Chiu). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to take the system (and corresponding device) disclosed by Barrett 
in view of Jardin and Devine and modify it as indicated by Chiu such that the system 
(and corresponding device) further comprises after a successful login attempt, the 
intermediary server provides the client machine with an initial webpage that includes 
hyperlinks that are initially directed to the intermediary server but that ultimately 
reference the remote server. One would be motivated to have this, as there is need for 
customizing and extending information retrieval to provide users a more flexible and 
personalized experience (In Barrett, Page 510, 2 nd paragraph -"Intermediaries 
represent...", and Page 51 1, 1 st and Last paragraphs on page). 

Conclusion 

* Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David Lazaro whose telephone number is 571-272- 
3986. The examiner can normally be reached on 8:30-5:00 M-F. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Saleh Najjar can be reached on 571-272-4006. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 




